Right of access
In legal terms, he/she has the right to obtain confirmation as to whether or not his/her personal data is processed by BIAL.
He/she also has the right to access his/her personal data, as well as to obtain the following additional information or explanations:
(i) the reasons for the processing of his/her personal data;
(ii) the types of data being processed;
(iii) entities to which his/her personal data might be forwarded, including entities located outside the European Union or international organisations, in which case the data subject will be informed of the warranties covering the transfer of its data;
(iv) storage periods of his/her data or, if this is not possible, the criteria for fixing this period;
(v) rights the data subject benefits from regarding the processing of his/her personal data;
(vi) if the personal data was not supplied by the data subject, information on its origin;
(vii) the existence of automated individual decisions, including profile settings, and, in this case, information on the underlying logic of this processing, as well as its importance and foreseen consequences.
Right of rectification
Whenever the data subject believes that his/her personal data is incorrect or incomplete, he/she can request its rectification or supplementation.
Right to erase
In legal terms, the data subject has the right to request the erasure of his/her personal data in one of the following cases:
(i) the personal data is no longer necessary for the purposes for which it was collected or processed;
(ii) the data subject objects the data processing and there are no prevailing legitimate interests that justify the processing, or the data was processed for purposes of direct marketing (sending of unsolicited communications);
(iii) the personal data is being processed illegally;
(iv) the personal data has to be deleted due to a legal obligation BIAL is subject to; or
(v) the personal data has been collected regarding the provision of services by the information society.
The right to erasure does not apply when the processing is necessary for the following purposes:
(i) exercising the right of freedom of expression and information;
(ii) compliance with a legal obligation requiring the processing and to which BIAL is subject to;
(iii) reasons of public interest regarding public health;
(iv) archiving purposes of public interest, scientific or historic investigation purposes or statistical purposes, inasmuch as exercising the right to erasure seriously undermines achieving the purposes of that processing; or
(v) establishment, exercise or defence of a right in legal proceedings.
Right to restrict processing
You can request the restriction of your personal data processing, in the following cases:
(i) if you dispute the accuracy of your personal data, for a period which allows BIAL to check its accuracy;
(ii) if the processing is illegal and you oppose the erasure of your personal data and request, conversely, the restriction of the processing;
(iii) if BIAL no longer needs the personal data for the purposes of the processing, but that data is necessary for the purposes of establishing, exercising or defending a right in legal proceedings; or
(iv) if you have expressed your opposition to the processing, until such time as BIAL’s legitimate interests outweigh your own.
Right of portability
You have the right to receive your personal data, which you provided, in a structured, general-use format that allows for automatic reading. You also have the right to request that the data be transmitted by BIAL to another data controller, as long as that is technically possible and, in this particular case, the legal requirements to exercise that right are fulfilled.
Right to object
In legal terms, you have the right to object the processing of your personal data at any moment, for reasons related to your specific situation, in the following cases:
(i) When the processing is based on BIAL’s legitimate interest, without prejudice to BIAL presenting compelling and legitimate reasons for such processing that outweigh the interests, rights and freedoms of the data subject, or for the purposes of establishment, exercise or defence of a right in legal proceedings; or
(ii) When the processing is performed for purposes different from those to which the data was collected for, but which are compatible.
The right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a competent supervisory authority, regarding matters related to the processing of your personal data. Click here to obtain the contact information of the relevant authority in your country or region.